recon-skills

🛡️ Recon & Pentest Skill Pack 169 offensive security skills for recon and pentest. Field-validated techniques from 600+ company targets across 45+ sectors. Updated with browser fingerprint evasion, anti-bot bypass, hardcoded credential hunting, SCADA/ICS enumeration. 📖 Blog & research: hiago.sh —...

Digital-Privacy

English | 简体中文 この世界には2種類の暗号技術がある。妹がファイルを読めないようにする暗号と、主要な政府がファイルを読めないようにする暗号だ。 Bruce Schneier『Applied Cryptography』 内容 : 情報保護、オープンソースインテリジェンス（OSINT）リソース リポジトリリンク : https://github.com/ffffffff0x/Digital-Privacy ヒント 1. プラットフォームごとに異なるニックネームとアバターを使うようにしよう。 2...

curl_cffi 代码问题漏洞

curlcffi is a Python HTTP client library developed by Lexiforest personal developers, which supports browser fingerprint simulation. Versions of curlcffi prior to 0.15.0 have code vulnerabilities. These vulnerabilities stem from the lack of restrictions on requests directed to internal IP ranges,...

Zulip 安全漏洞

Zulip is a powerful open source group chat application from the Zulip team. It is used to combine the immediacy of real-time chat with the productivity benefits of threaded conversations. Zulip suffers from a security vulnerability that stems from the fact that an attacker who can send a message...